CVE-2025-3158

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3

Description A critical issue has been found in the Open Asset Import Library Assimp, affecting the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup in the file code/AssetLib/LWO/LWOAnimation.cpp of the LWO File Handler component. This issue leads to a heap-based buffer overflow. The attack can be launched on the local host.

Recommendations For Open Asset Import Library Assimp version 5.4.3, consider disabling the Assimp::LWO::AnimResolver::UpdateAnimRangeSetup function until a patch is available to prevent heap-based buffer overflow exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.